The second issue with the password key was fixed (GET variables were not being picked up), but the first issue remains. The domain is highesistence.com, but I hard-coded the correct password reset permalink into the register/signup templates so you won't be able to see the issue first-hand.